Latest version of @graphql-eslint/eslint-plugin (4.4.0) uses the vulnerable braces@3.0.2 package #2913
Description
Is your feature request related to a problem? Please describe.
In order to fix CVE-2024-4068, we need to upgrade the braces package to version 3.0.3. But the latest version of @graphql-eslint/eslint-plugin (4.4.0) still uses the vulnerable braces@3.0.2 package.
Describe the solution you'd like
Use a newer version of the braces package.
Describe alternatives you've considered
You can let me know if there is a workaround.
Additional context